From 5db07140726e6e1bf615ed075e9a8b653508c2a7 Mon Sep 17 00:00:00 2001 From: Clayton Gilmer Date: Mon, 18 Aug 2025 12:00:52 +0900 Subject: container: optionally isolate host abstract UNIX domain sockets via landlock --- internal/app/app_pd_linux_test.go | 2 ++ 1 file changed, 2 insertions(+) (limited to 'internal/app/app_pd_linux_test.go') diff --git a/internal/app/app_pd_linux_test.go b/internal/app/app_pd_linux_test.go index 109e8816..96182d31 100644 --- a/internal/app/app_pd_linux_test.go +++ b/internal/app/app_pd_linux_test.go @@ -62,6 +62,7 @@ var testCasesPd = []sealTestCase{ Remount(m("/"), syscall.MS_RDONLY), SeccompPresets: seccomp.PresetExt | seccomp.PresetDenyDevel, HostNet: true, + HostAbstract: true, RetainSession: true, ForwardCancel: true, }, @@ -203,6 +204,7 @@ var testCasesPd = []sealTestCase{ Remount(m("/"), syscall.MS_RDONLY), SeccompPresets: seccomp.PresetExt | seccomp.PresetDenyDevel, HostNet: true, + HostAbstract: true, RetainSession: true, ForwardCancel: true, }, -- cgit v1.3.1